Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File:                     aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier:          7d6xswl5l8YZVN2IF4Gf36AuZGXuY7sQNRtBjqERz4A=
Subject key identifier:   31:36:EF:96:C6:DE:42:17:71:96:DE:F6:EF:63:0D:71:75:34:8B:78
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer:       /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number:          014A
Signing time:             Sat 23 Aug 2025 04:25:24 +0000
Manifest this update:     Sat 23 Aug 2025 04:25:23 +0000
Manifest next update:     Sat 30 Aug 2025 04:25:23 +0000
Files and hashes:         1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: yzVcRbQsIqobXPWE+QMfKQ7phwk2ry/pPZZJSeIPN30=)
                          2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
        Validity
            Not Before: Aug 23 04:25:23 2025 GMT
            Not After : Aug 30 04:25:23 2025 GMT
        Subject: CN=68a942b3-1ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:13:f8:3e:8d:70:8e:09:7a:60:86:d8:ce:
                    e9:39:b1:37:7e:36:d7:f5:b2:b1:53:a2:10:1d:6b:
                    c2:df:57:eb:c7:40:0a:1b:b4:f4:c1:a2:6d:3e:91:
                    41:d0:9d:4a:bd:1f:b2:08:cd:65:a4:29:e2:3e:0c:
                    74:3d:1f:ed:cd:56:be:d6:dc:07:24:05:5e:8f:d2:
                    75:f3:76:43:07:ed:15:5c:f6:82:86:07:7f:d5:76:
                    db:59:8b:2f:03:3f:a4:01:2f:b6:b4:5f:7a:ee:13:
                    7f:ef:94:1e:72:57:23:7f:09:65:dd:82:32:c8:77:
                    dc:d9:1d:6c:68:5f:57:95:8d:c3:39:3c:80:98:ec:
                    2d:96:23:76:b9:8d:ce:9b:94:5f:8e:95:4e:64:62:
                    36:a1:57:dd:8d:5e:b3:57:e3:32:0c:c4:ea:0a:bf:
                    0c:37:71:1b:e0:6d:5a:9e:ba:30:6e:52:d5:60:54:
                    9a:85:81:c3:90:6c:11:6e:a6:7f:39:71:47:81:28:
                    38:94:27:68:4d:7c:b3:69:90:94:80:8d:46:b1:81:
                    ce:df:02:7b:65:68:b4:44:6d:94:af:3e:df:a5:d2:
                    2f:d7:b2:cf:73:4e:68:01:25:d2:e7:87:77:db:03:
                    55:4b:1d:46:7f:c4:b7:bc:92:ff:8c:7c:ba:97:f7:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:EF:96:C6:DE:42:17:71:96:DE:F6:EF:63:0D:71:75:34:8B:78
            X509v3 Authority Key Identifier:
                keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:86:b3:25:ec:0e:3e:cf:9a:86:41:d3:cd:53:fb:a8:92:e2:
         92:26:04:f2:9b:03:1f:f4:df:4b:c4:e9:4b:4d:21:3f:18:43:
         a6:db:53:11:55:2e:d5:bb:5f:0d:c7:c0:fb:d5:a6:29:84:f3:
         b3:12:d9:d9:93:4d:c4:cd:ba:b0:42:ff:01:17:9b:e5:da:a5:
         5f:5b:d5:a6:b6:c0:cd:28:d5:cb:1d:05:bf:c1:38:d9:b9:a3:
         ee:f0:c5:43:96:9b:9f:ce:5a:e3:8b:8f:65:38:96:00:4b:35:
         8f:ff:98:9b:91:4a:0c:ae:4a:26:23:70:c6:2b:1e:79:98:5b:
         a0:25:b6:66:ce:79:e8:e9:5f:a3:bf:20:c4:cf:9e:54:47:27:
         7f:d1:ea:8d:11:fd:63:33:2b:d5:17:62:2e:4e:46:b8:86:2d:
         5e:68:37:37:aa:24:62:50:e5:d7:b4:94:6a:ed:bd:49:75:69:
         2d:97:10:97:68:8b:0d:da:88:26:6e:33:c5:c4:cb:c3:09:98:
         f5:9f:68:27:d3:2a:03:0c:93:76:9c:0a:62:9a:d3:f8:cc:4a:
         b4:46:73:b9:f7:c1:67:b0:e4:b5:51:e6:cc:9d:a3:eb:bd:69:
         80:87:2a:f5:9e:b5:50:cc:ad:59:df:7c:dc:33:b8:f2:c3:62:
         09:ad:2d:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3
M0I4QjMxMDMwHhcNMjUwODIzMDQyNTIzWhcNMjUwODMwMDQyNTIzWjAYMRYwFAYD
VQQDEw02OGE5NDJiMy0xYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2RUT+D6NcI4JemCG2M7pObE3fjbX9bKxU6IQHWvC31frx0AKG7T0waJtPpFB
0J1KvR+yCM1lpCniPgx0PR/tzVa+1twHJAVej9J183ZDB+0VXPaChgd/1XbbWYsv
Az+kAS+2tF967hN/75Qeclcjfwll3YIyyHfc2R1saF9XlY3DOTyAmOwtliN2uY3O
m5RfjpVOZGI2oVfdjV6zV+MyDMTqCr8MN3Eb4G1anrowblLVYFSahYHDkGwRbqZ/
OXFHgSg4lCdoTXyzaZCUgI1GsYHO3wJ7ZWi0RG2Urz7fpdIv17LPc05oASXS54d3
2wNVSx1Gf8S3vJL/jHy6l/eigQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE275bG
3kIXcZbe9u9jDXF1NIt4MB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5
QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4
QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHhrMl7A4+z5qGQdPNU/uokuKSJgTymwMf9N9LxOlLTSE/GEOm21MR
VS7Vu18Nx8D71aYphPOzEtnZk03EzbqwQv8BF5vl2qVfW9WmtsDNKNXLHQW/wTjZ
uaPu8MVDlpufzlrji49lOJYASzWP/5ibkUoMrkomI3DGKx55mFugJbZmznno6V+j
vyDEz55URyd/0eqNEf1jMyvVF2IuTka4hi1eaDc3qiRiUOXXtJRq7b1JdWktlxCX
aIsN2ogmbjPFxMvDCZj1n2gn0yoDDJN2nApimtP4zEq0RnO598FnsOS1UebMnaPr
vWmAhyr1nrVQzK1Z33zcM7jyw2IJrS0j
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:45:22 2025 by rpki-client